Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade omniauth to 2.0 #84

Closed
wants to merge 2 commits into from
Closed

Conversation

manuelvanrijn
Copy link
Contributor

Because I was getting the CVE-2015-9284 because the version of omniauth was too low, I've upgraded it to a newer version.

This should fix #81.

The only change I also had to add was the following, to have the GET /auth/:provider to work

OmniAuth.config.allowed_request_methods = [:get, :post]

@travisofthenorth
Copy link

@m0n9oose any help with the failures here?

@jonspalmer
Copy link

It would be terrific to get this change merged and a new release. The CVE issue is becoming a pain point.

@stale
Copy link

stale bot commented Aug 4, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the wontfix label Aug 4, 2021
@stale stale bot closed this Aug 11, 2021
@jonspalmer
Copy link

We really need this PR to me merge to mitigate the CVE. Can we get some attention on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add support for OmniAuth 2.0
3 participants